熱搜:win11繞過硬件限制安裝 一鍵重裝Win10系統(tǒng) 最干凈的u盤啟動盤 真正純凈版的win7系統(tǒng)
時間:2015-03-12 16:04:55 作者:qipeng 來源:系統(tǒng)之家 1. 掃描二維碼隨時看資訊 2. 請使用手機瀏覽器訪問: https://m.xitongzhijia.net/xtjc/20150312/41089.html 手機查看 評論 反饋
開始工作之前,我們先來制作一個分區(qū),然后來做試驗
。踨oot@localhost bin]# mkdir /tmp/test
。踨oot@localhost bin]# dd if=/dev/zero of=file count=102400
[root@localhost bin]#mkfs.ext3 file
######按Y繼續(xù)
。踨oot@localhost bin]#mount -o loop /tmp/test/file /mnt
看一下有沒有掛上
。踨oot@localhost bin]# df -HT
Filesystem Type Size Used Avail Use% Mounted on
/dev/mapper/VolGroup00-LogVol00
ext3 20G 4.3G 15G 23% /
/dev/sda1 ext3 104M 13M 86M 13% /boot
tmpfs tmpfs 185M 0 185M 0% /dev/shm
/tmp/test/file
ext3 51M 5.1M 44M 11% /mnt
然后寫入數(shù)據(jù)到里面
[root@localhost bin]#cd /mnt
。踨oot@localhost bin]#ls
lost+found
。踨oot@localhost mnt]# mkdir del
[root@localhost mnt]# cd del
。踨oot@localhost del]# touch 1 2 3
。踨oot@localhost del]# ls
1 2 3 lost+found
。踨oot@localhost del]# cd 。。
。踨oot@localhost mnt]#rf -rf del
[root@localhost bin]#ls
lost+found
下面開始恢復(fù)了
。踨oot@localhost mnt]#cd /usr/local/ext3grep/bin
掃描一下分區(qū)
[root@localhost bin]# 。/ext3grep /tmp/test/file --ls --inode 2
Running ext3grep version 0.10.2
Number of groups: 7
Loading group metadata.。。 done
Minimum / maximum journal block: 447 / 4561
Loading journal descriptors.。。 sorting.。。 done
The oldest inode block that is still in the journal, appears to be from 1315980293 = Wed Sep 14 14:04:53 2011
Number of descriptors in journal: 36; min / max sequence numbers: 2 / 6
Inode is Allocated
Finding all blocks that might be directories.
D: block containing directory start, d: block containing more directory entries.
Each plus represents a directory start that references the same inode as a directory start that we found previously.
Searching group 0: DD++D++
Searching group 1:
Searching group 2:
Searching group 3:
Searching group 4:
Searching group 5:
Searching group 6:
Writing analysis so far to ’file.ext3grep.stage1‘。 Delete that file if you want to do this stage again.
Result of stage one:
3 inodes are referenced by one or more directory blocks, 2 of those inodes are still allocated.
1 inodes are referenced by more than one directory block, 1 of those inodes is still allocated.
0 blocks contain an extended directory.
Result of stage two:
2 of those inodes could be resolved because they are still allocated.
All directory inodes are accounted for!
Writing analysis so far to ’file.ext3grep.stage2‘。 Delete that file if you want to do this stage again.
The first block of the directory is 433.
Inode 2 is directory “”。
Directory block 433:
。-- File type in dir_entry (r=regular file, d=directory, l=symlink)
| 。-- D: Deleted ; R: Reallocated
Indx Next | Inode | Deletion time Mode File name
==========+==========+----------------data-from-inode------+-----------+=========
0 1 d 2 drwxr-xr-x 。
1 2 d 2 drwxr-xr-x 。。
2 end d 11 drwx------ lost+found
3 4 r 12 D 1315980355 Wed Sep 14 14:05:55 2011 rrw-r--r-- 1
4 5 r 13 D 1315980355 Wed Sep 14 14:05:55 2011 rrw-r--r-- 2
5 6 r 14 D 1315980355 Wed Sep 14 14:05:55 2011 rrw-r--r-- 3
6 end d 1833 D 1315980355 Wed Sep 14 14:05:55 2011 drwxr-xr-x del
。踨oot@localhost bin]# 。/ext3grep /tmp/test/file --restore-file del --depth del
Running ext3grep version 0.10.2
Number of groups: 7
Minimum / maximum journal block: 447 / 4561
Loading journal descriptors.。。 sorting.。。 done
The oldest inode block that is still in the journal, appears to be from 1315980293 = Wed Sep 14 14:04:53 2011
Number of descriptors in journal: 36; min / max sequence numbers: 2 / 6
Writing output to directory RESTORED_FILES/
Loading file.ext3grep.stage2.。。 done
下面開始恢復(fù)文件
。踨oot@localhost bin]# 。/ext3grep /tmp/test/file --restore-all
Running ext3grep version 0.10.2
Number of groups: 7
Minimum / maximum journal block: 447 / 4561
Loading journal descriptors.。。 sorting.。。 done
The oldest inode block that is still in the journal, appears to be from 1315980313 = Wed Sep 14 14:05:13 2011
Number of descriptors in journal: 36; min / max sequence numbers: 3 / 9
Loading file.ext3grep.stage2.。。 done
Restoring 1
Restoring 2
Restoring 3
Restoring del/1
Restoring del/2
Restoring del/3
這個命令是恢復(fù)所有的,當(dāng)然也可以恢復(fù)指定文件的。
可以看到在當(dāng)前目錄下,多了一個目錄
。踨oot@localhost bin]# ls
RESTORED_FILES ext3grep
我們進(jìn)去看一下
[root@localhost bin]# cd RESTORED_FILES/
。踨oot@localhost RESTORED_FILES]# ls
1 2 3 del lost+found
上面就是Linux使用ext3grep恢復(fù)文件的方法介紹了,通過本文的介紹可以看出,ext3grep不僅能夠恢復(fù)所有被刪除的文件,還能恢復(fù)指定的文件。
發(fā)表評論
共0條
評論就這些咯,讓大家也知道你的獨特見解
立即評論以上留言僅代表用戶個人觀點,不代表系統(tǒng)之家立場